Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
File: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft (raw, json)
Hash identifier: v63AsqR8v2/L/DR+bb3Fmb0eI/zSF4ar2nnsMjKBeVo=
Subject key identifier: F3:AB:E6:36:46:DF:7F:18:D6:97:8C:B8:0D:3F:7A:77:1D:65:08:43
Authority key identifier: 09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
Certificate issuer: /CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Certificate serial: 019F17C36FE1FD9B8ECEE80588D0D8AA8B4B
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
Manifest number: 067D
Signing time: Tue 30 Jun 2026 09:01:51 +0000
Manifest this update: Tue 30 Jun 2026 09:01:51 +0000
Manifest next update: Wed 01 Jul 2026 09:01:51 +0000
Files and hashes: 1: 1cBxWcRD-ajLhLNgA3S5Au__sOc.roa (hash: 5ni5kkd9OlF+FGiiy/ZgvxZvVXHGX7AhkHl4yh5xEQE=)
2: Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl (hash: La/6js/UV+8NS5FMI2akRNitO73lLYmCsywuWKjkttU=)
3: a6e3sASUiAxUoLrPtfCHLqgPz1A.roa (hash: MgKnL/M9TiKwgJnGXFmtPosWzhlu5kiGbu/gEj5vWEg=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Wed 01 Jul 2026 09:01:51 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9f:17:c3:6f:e1:fd:9b:8e:ce:e8:05:88:d0:d8:aa:8b:4b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=09b8fb92280ab05b4432e43b95450e73b2773d5b
Validity
Not Before: Jun 30 09:01:51 2026 GMT
Not After : Jul 1 09:01:51 2026 GMT
Subject: CN=f3abe63646df7f18d6978cb80d3f7a771d650843
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bf:58:cd:53:6b:5a:d4:65:f3:b7:b0:5d:aa:ca:
df:8d:f5:3b:e2:0f:ed:5e:8f:d5:9b:c9:65:59:ed:
a4:0d:8b:af:4a:64:6d:53:b2:4c:10:c7:3b:74:71:
a2:0b:34:27:d4:d5:9b:ac:52:b2:29:1e:ad:f5:57:
69:a8:a5:0a:26:3b:0e:fe:aa:97:c5:c7:a4:b9:f1:
a9:76:ca:da:21:12:50:4d:cb:a3:4e:dc:2c:d8:99:
8a:33:ce:81:9c:1d:6d:59:89:ca:66:3a:a9:5c:38:
fa:c0:71:6f:b2:f3:4b:0f:0d:6c:97:47:78:9a:93:
fc:e8:fd:14:3b:53:38:9a:af:71:c5:63:e7:15:e5:
c0:f8:da:c8:98:ce:3f:ef:6e:a2:f9:2a:72:37:9c:
cb:49:d4:46:97:31:bd:44:a3:f0:42:c1:ee:55:88:
ea:8b:18:c0:ca:8b:b8:35:e7:e3:7b:87:85:8c:b4:
0c:a9:b0:cd:8e:e7:f8:e0:32:ad:92:67:26:f7:65:
e5:c9:1e:55:f6:72:ba:09:1b:2d:5a:5b:7f:04:1b:
54:d0:e8:c6:3c:b7:4d:ed:25:7c:b7:c2:f1:65:3e:
fb:77:34:23:1d:62:ff:a5:7c:6f:6f:51:5c:67:d1:
99:41:24:09:ef:61:5f:44:24:55:08:13:f3:89:68:
2a:57
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
F3:AB:E6:36:46:DF:7F:18:D6:97:8C:B8:0D:3F:7A:77:1D:65:08:43
X509v3 Authority Key Identifier:
keyid:09:B8:FB:92:28:0A:B0:5B:44:32:E4:3B:95:45:0E:73:B2:77:3D:5B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/a9/726d15-5c19-4e85-bc59-da739856cfb8/1/Cbj7kigKsFtEMuQ7lUUOc7J3PVs.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
31:0b:b5:67:28:6f:d0:b5:a0:35:0d:a3:c9:16:d0:25:30:82:
48:1b:ab:02:6b:ea:b6:b3:53:39:5f:72:77:ca:0e:a3:58:c3:
ce:7d:fe:66:5d:4a:16:e0:96:55:95:86:45:0b:0c:69:57:e4:
c8:3c:e4:98:90:db:94:83:56:2e:ac:82:07:ec:14:8f:17:88:
15:44:11:fc:39:82:87:5e:99:7e:1d:56:ca:3a:af:10:86:8d:
6e:25:db:3d:68:29:8b:7a:7e:5e:71:8e:fa:9d:cb:e3:1f:6b:
ca:68:9b:4a:c5:5a:fc:6f:89:eb:47:89:25:38:b6:2b:c1:5b:
e2:8c:31:0a:44:75:63:6e:3f:75:05:cc:0e:2f:35:9d:9e:37:
6a:1f:f8:98:8d:f3:c6:56:0f:3a:62:7c:d4:d1:9f:49:42:60:
6f:94:c7:aa:1f:de:43:61:af:5e:c6:88:8f:fd:7d:e7:46:0c:
f2:ed:f2:e0:7e:4c:08:21:ab:c0:85:99:dc:4d:dd:ef:c9:51:
26:26:57:5c:37:db:f1:1a:9a:05:ce:c4:b9:3e:99:7a:1e:3e:
4c:a5:a3:8d:c9:88:8a:d2:d5:5b:61:80:9d:dc:35:bf:a4:f7:
3f:83:1a:85:e9:76:35:95:ac:c4:c7:75:dc:fe:e2:00:d8:d4:
4f:30:9f:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 30 18:23:20 2026 by rpki-client